CVE-2026-81016

A flaw was found in the Linux kernel. Specifically, within the AMD Platform Management Controller PMC component, the amdstbs2dinit function does not properly validate memory addresses returned by System Management Unit SMU commands. This can result in the kernel attempting to map a critical memor...

CVE-2026-81006

A flaw was found in the Linux kernel's Intelligent Platform Management Interface IPMI component. During the registration of an IPMI system management interface, an error in the cleanup process can leave a system file sysfs attribute registered even after its associated memory has been released...

CVE-2026-80997

A flaw was found in the Linux kernel's IP Accelerator IPA network driver. Specifically, the ipastartxmit function incorrectly manages the transmit TX queue during a device's runtime resume process. This can lead to the TX queue stopping permanently because the mechanism intended to restart it is...

CVE-2026-80995

A flaw was found in the Linux kernel's MCTP Message Control Transport Protocol networking implementation. This vulnerability arises because the mctproutelookup function accesses a route device without holding a persistent reference, allowing the device to be deallocated while still in use. A loca...

CVE-2026-80994

A flaw was found in the Open vSwitch component of the Linux kernel. A local attacker could exploit a use-after-free vulnerability during flow deletion. This occurs due to a race condition where the flow mask is freed prematurely, allowing subsequent operations to access deallocated memory...

CVE-2026-80992

A flaw was found in the net: ravb component of the Linux kernel. This vulnerability allows for a NULL pointer dereference when the Precision Time Protocol PTP clock's index is queried before it is properly initialized or if its registration fails. This issue could lead to a system crash, resultin...

CVE-2026-80957

A flaw was found in the dm-pcache component of the Linux kernel. A local attacker could exploit a vulnerability in the cachereplay function, which does not properly handle a forged last-kset chain. By crafting a malicious chain that points back to an already visited segment, an attacker can cause...

CVE-2026-80952

A flaw was found in the Linux kernel's i3c master component. During device unregistration, a race condition can occur where the device descriptor is prematurely cleared. This can lead to an information leak, exposing kernel stack contents in the generated modalias. Additionally, this flaw could...

CVE-2026-89693

A flaw was found in the Linux kernel's Network File System NFS daemon, nfsd. This vulnerability arises from improper error handling within the nfsd4create function, which is responsible for creating files and directories. When Access Control Lists ACLs are translated, any errors are silently...

CVE-2026-89583

A flaw was found in the Linux kernel's Bluetooth subsystem. An out-of-bounds OOB read vulnerability exists in the eirgetservicedata function due to incorrect length calculation when parsing Extended Inquiry Response EIR advertising data. A remote attacker, by sending a specially crafted periodic...

CVE-2026-89569

A flaw was found in the Linux kernel's Bluetooth RFCOMM subsystem. This vulnerability arises because the system does not properly manage memory when handling Bluetooth security confirmations. A race condition allows a part of the system to free memory that is still in use by another part, leading...

CVE-2026-89544

A flaw was found in the Linux kernel's SUNRPC component. Multiple defects in the gssxdecoptionarray XDR option-array decoder's error handling can lead to a NULL dereference, a reference count leak, and a use-after-free vulnerability. An attacker could potentially exploit these issues by providing...

CVE-2026-89533

A flaw was found in the svcrdma component of the Linux kernel. Incorrect offset arithmetic in the svcrdmareadchunkrange function can lead to a u32 underflow. This underflow can cause the system to attempt to allocate a large amount of memory, potentially resulting in a Denial of Service DoS due t...

CVE-2026-89476

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. A remote attacker could exploit this by sending specially crafted duplicate RECONF responses. This action can cause an underflow in the stream-outcnt counter, potentially leading to unexpected system...

CVE-2026-89450

A flaw was found in the Linux kernel's iommu/tegra241-cmdqv module. A Virtual Machine Manager VMM can exploit this vulnerability by providing a virtual Stream ID vSID that exceeds the intended 20-bit width of the SIDMATCH field. This improper input validation causes the system to incorrectly...

CVE-2026-89643

A flaw was found in the Linux kernel's audit subsystem. When fsnotify rules are automatically removed, the system incorrectly manages memory references, leading to a situation where freed memory can be accessed again. This memory corruption vulnerability could allow a local attacker to cause a...

CVE-2026-89626

A flaw was found in the Linux kernel's Human Interface Device HID sensor custom driver. When creating sysfs groups for custom sensor fields, the hidsensorcustomaddattributes function fails to properly clean up previously created groups if an error occurs. This improper resource management could...

CVE-2026-89593

A flaw was found in the Linux kernel's huge page hugetlb subsystem. This vulnerability occurs when a huge page of memory is shared between a parent and a child process. If the parent process unmaps the huge page before the child, the system can incorrectly reduce the count of reserved huge pages...

CVE-2026-89590

A flaw was found in the accel/rocket driver within the Linux kernel. Incorrect error handling in the rocketjobrun function can lead to resource leaks. This occurs when the system fails to properly release references to Direct Memory Access DMA fences and Power Management PM resources during error...

CVE-2026-89555

A flaw was found in the Linux kernel's Multiprotocol Label Switching MPLS subsystem. When processing specially crafted Geneve packets through an MPLS multipath setup, a use-after-free vulnerability occurs. This issue arises because a cached header pointer hdr is not reloaded after pskbmaypull...